Which of the following division is defined in the TCSEC (Orange Book) as minimal protection?

The correct answer is A. Division D. In the TCSEC (Orange Book) framework, Division D is defined as Minimal Protection. It is the lowest division and is assigned to systems that have been evaluated but failed to meet the requirements of any higher division. Systems in Division D provide essentially no security…

Submitted by yuriko_h· Apr 18, 2026Systems and Application Security

Question

Which of the following division is defined in the TCSEC (Orange Book) as minimal protection?

Options

ADivision D
BDivision C
CDivision B
DDivision A

How the community answered

(48 responses)

A
90% (43)
B
6% (3)
C
2% (1)
D
2% (1)

Explanation

In the TCSEC (Orange Book) framework, Division D is defined as Minimal Protection. It is the lowest division and is assigned to systems that have been evaluated but failed to meet the requirements of any higher division. Systems in Division D provide essentially no security beyond what the operating system's standard mechanisms offer - no formal access controls, no audit, and no assurance requirements. Division C (Discretionary Protection) adds user-controlled access controls. Division B (Mandatory Protection) adds label-based mandatory access controls. Division A (Verified Protection) is the highest level, requiring formal mathematical verification of the security design.

Topics

#TCSEC#Orange Book#Security Models#System Evaluation

Community Discussion

No community discussion yet for this question.

Full SSCP Practice